spring security的OAuth2单点登录代码分析

最新推荐文章于 2022-04-14 11:21:21 发布
最新推荐文章于 2022-04-14 11:21:21 发布
阅读量139 收藏
点赞数
文章标签： java
原文链接：https://my.oschina.net/u/2266730/blog/801610
版权

ZUUL ignore的header

0 = "authorization"
1 = "set-cookie"
2 = "expires"
3 = "x-content-type-options"
4 = "x-xss-protection"
5 = "cookie"
6 = "x-frame-options"
7 = "cache-control"
8 = "pragma"

委托过滤器的列表

 

0 = {WebAsyncManagerIntegrationFilter@8254} 
1 = {SecurityContextPersistenceFilter@8253} 
2 = {HeaderWriterFilter@8252} 
3 = {CsrfFilter@8251} 
4 = {SecurityConfiguration$2@8250} 
5 = {LogoutFilter@8247} 
6 = {OAuth2ClientAuthenticationProcessingFilter@8367} 
7 = {RequestCacheAwareFilter@8366} 
8 = {SecurityContextHolderAwareRequestFilter@8365} 
9 = {AnonymousAuthenticationFilter@8364} 
10 = {SessionManagementFilter@8363} 
11 = {ExceptionTranslationFilter@8362} 
12 = {FilterSecurityInterceptor@8777} 

 

ZUUL的配置项

public class ZuulConstants {
    public static final String ZUUL_CASSANDRA_ENABLED = "zuul.cassandra.enabled";
    public static final String ZUUL_NIWS_CLIENTLIST = "zuul.niws.clientlist";
    public static final String DEFAULT_NFASTYANAX_READCONSISTENCY = "default.nfastyanax.readConsistency";
    public static final String DEFAULT_NFASTYANAX_WRITECONSISTENCY = "default.nfastyanax.writeConsistency";
    public static final String DEFAULT_NFASTYANAX_SOCKETTIMEOUT = "default.nfastyanax.socketTimeout";
    public static final String DEFAULT_NFASTYANAX_MAXCONNSPERHOST = "default.nfastyanax.maxConnsPerHost";
    public static final String DEFAULT_NFASTYANAX_MAXTIMEOUTWHENEXHAUSTED = "default.nfastyanax.maxTimeoutWhenExhausted";
    public static final String DEFAULT_NFASTYANAX_MAXFAILOVERCOUNT = "default.nfastyanax.maxFailoverCount";
    public static final String DEFAULT_NFASTYANAX_FAILOVERWAITTIME = "default.nfastyanax.failoverWaitTime";
    public static final String ZUUL_CASSANDRA_KEYSPACE = "zuul.cassandra.keyspace";
    public static final String ZUUL_CASSANDRA_MAXCONNECTIONSPERHOST = "zuul.cassandra.maxConnectionsPerHost";
    public static final String ZUUL_CASSANDRA_HOST = "zuul.cassandra.host";
    public static final String ZUUL_CASSANDRA_PORT = "zuul.cassandra.port";
    public static final String ZUUL_EUREKA = "zuul.eureka.";
    public static final String ZUUL_AUTODETECT_BACKEND_VIPS = "zuul.autodetect-backend-vips";
    public static final String ZUUL_RIBBON_NAMESPACE = "zuul.ribbon.namespace";
    public static final String ZUUL_RIBBON_VIPADDRESS_TEMPLATE = "zuul.ribbon.vipAddress.template";
    public static final String ZUUL_CASSANDRA_CACHE_MAX_SIZE = "zuul.cassandra.cache.max-size";
    public static final String ZUUL_HTTPCLIENT = "zuul.httpClient.";
    public static final String ZUUL_USE_ACTIVE_FILTERS = "zuul.use.active.filters";
    public static final String ZUUL_USE_CANARY_FILTERS = "zuul.use.canary.filters";
    public static final String ZUUL_FILTER_PRE_PATH = "zuul.filter.pre.path";
    public static final String ZUUL_FILTER_POST_PATH = "zuul.filter.post.path";
    public static final String ZUUL_FILTER_ROUTING_PATH = "zuul.filter.routing.path";
    public static final String ZUUL_FILTER_CUSTOM_PATH = "zuul.filter.custom.path";

    //This property turns on the admin page. Note that the admin page should be only accessed internally
    //and should be protected from general access
    public static final String ZUUL_FILTER_ADMIN_ENABLED = "zuul.filter.admin.enabled";
    public static final String ZUUL_FILTER_ADMIN_REDIRECT = "zuul.filter.admin.redirect.path";


    public static final String ZUUL_DEBUG_REQUEST = "zuul.debug.request";
    public static final String ZUUL_DEBUG_PARAMETER = "zuul.debug.parameter";
    public static final String ZUUL_ROUTER_ALT_ROUTE_VIP = "zuul.router.alt.route.vip";
    public static final String ZUUL_ROUTER_ALT_ROUTE_HOST = "zuul.router.alt.route.host";
    public static final String ZUUL_ROUTER_ALT_ROUTE_PERMYRIAD = "zuul.router.alt.route.permyriad";
    public static final String ZUUL_ROUTER_ALT_ROUTE_MAXLIMIT = "zuul.router.alt.route.maxlimit";
    public static final String ZUUL_NIWS_DEFAULTCLIENT = "zuul.niws.defaultClient";
    public static final String ZUUL_DEFAULT_HOST = "zuul.default.host";
    public static final String ZUUL_HOST_SOCKET_TIMEOUT_MILLIS = "zuul.host.socket-timeout-millis";
    public static final String ZUUL_HOST_CONNECT_TIMEOUT_MILLIS = "zuul.host.connect-timeout-millis";
    public static final String ZUUL_INCLUDE_DEBUG_HEADER = "zuul.include-debug-header";
    public static final String ZUUL_INITIAL_STREAM_BUFFER_SIZE = "zuul.initial-stream-buffer-size";
    public static final String ZUUL_SET_CONTENT_LENGTH = "zuul.set-content-length";
    public static final String ZUUL_DEBUGFILTERS_DISABLED = "zuul.debugFilters.disabled";
    public static final String ZUUL_DEBUG_VIP = "zuul.debug.vip";
    public static final String ZUUL_DEBUG_HOST = "zuul.debug.host";

    // Prevent instantiation
    private ZuulConstants() {
        throw new AssertionError("Must not instantiate constant utility class");
    }

}

Ribbon的配置项(com/netflix/client/config/DefaultClientConfigImpl.java:70)

putDefaultIntegerProperty(CommonClientConfigKey.MaxHttpConnectionsPerHost, getDefaultMaxHttpConnectionsPerHost());
putDefaultIntegerProperty(CommonClientConfigKey.MaxTotalHttpConnections, getDefaultMaxTotalHttpConnections());
putDefaultBooleanProperty(CommonClientConfigKey.EnableConnectionPool, getDefaultEnableConnectionPool());
putDefaultIntegerProperty(CommonClientConfigKey.MaxConnectionsPerHost, getDefaultMaxConnectionsPerHost());
putDefaultIntegerProperty(CommonClientConfigKey.MaxTotalConnections, getDefaultMaxTotalConnections());
putDefaultIntegerProperty(CommonClientConfigKey.ConnectTimeout, getDefaultConnectTimeout());
putDefaultIntegerProperty(CommonClientConfigKey.ConnectionManagerTimeout, getDefaultConnectionManagerTimeout());
putDefaultIntegerProperty(CommonClientConfigKey.ReadTimeout, getDefaultReadTimeout());
putDefaultIntegerProperty(CommonClientConfigKey.MaxAutoRetries, getDefaultMaxAutoRetries());
putDefaultIntegerProperty(CommonClientConfigKey.MaxAutoRetriesNextServer, getDefaultMaxAutoRetriesNextServer());
putDefaultBooleanProperty(CommonClientConfigKey.OkToRetryOnAllOperations, getDefaultOkToRetryOnAllOperations());
putDefaultBooleanProperty(CommonClientConfigKey.FollowRedirects, getDefaultFollowRedirects());
putDefaultBooleanProperty(CommonClientConfigKey.ConnectionPoolCleanerTaskEnabled, getDefaultConnectionPoolCleanerTaskEnabled());
putDefaultIntegerProperty(CommonClientConfigKey.ConnIdleEvictTimeMilliSeconds, getDefaultConnectionidleTimeInMsecs());
putDefaultIntegerProperty(CommonClientConfigKey.ConnectionCleanerRepeatInterval, getDefaultConnectionIdleTimertaskRepeatInMsecs());
putDefaultBooleanProperty(CommonClientConfigKey.EnableGZIPContentEncodingFilter, getDefaultEnableGzipContentEncodingFilter());
String proxyHost = ConfigurationManager.getConfigInstance().getString(getDefaultPropName(CommonClientConfigKey.ProxyHost.key()));
if (proxyHost != null && proxyHost.length() > 0) {
    setProperty(CommonClientConfigKey.ProxyHost, proxyHost);
}
Integer proxyPort = ConfigurationManager
        .getConfigInstance()
        .getInteger(
                getDefaultPropName(CommonClientConfigKey.ProxyPort),
                (Integer.MIN_VALUE + 1)); // + 1 just to avoid potential clash with user setting
if (proxyPort != (Integer.MIN_VALUE + 1)) {
    setProperty(CommonClientConfigKey.ProxyPort, proxyPort);
}
putDefaultIntegerProperty(CommonClientConfigKey.Port, getDefaultPort());
putDefaultBooleanProperty(CommonClientConfigKey.EnablePrimeConnections, getDefaultEnablePrimeConnections());
putDefaultIntegerProperty(CommonClientConfigKey.MaxRetriesPerServerPrimeConnection, getDefaultMaxRetriesPerServerPrimeConnection());
putDefaultIntegerProperty(CommonClientConfigKey.MaxTotalTimeToPrimeConnections, getDefaultMaxTotalTimeToPrimeConnections());
putDefaultStringProperty(CommonClientConfigKey.PrimeConnectionsURI, getDefaultPrimeConnectionsUri());
putDefaultIntegerProperty(CommonClientConfigKey.PoolMinThreads, getDefaultPoolMinThreads());
putDefaultIntegerProperty(CommonClientConfigKey.PoolMaxThreads, getDefaultPoolMaxThreads());
putDefaultLongProperty(CommonClientConfigKey.PoolKeepAliveTime, getDefaultPoolKeepAliveTime());
putDefaultTimeUnitProperty(CommonClientConfigKey.PoolKeepAliveTimeUnits, getDefaultPoolKeepAliveTimeUnits());
putDefaultBooleanProperty(CommonClientConfigKey.EnableZoneAffinity, getDefaultEnableZoneAffinity());
putDefaultBooleanProperty(CommonClientConfigKey.EnableZoneExclusivity, getDefaultEnableZoneExclusivity());
putDefaultStringProperty(CommonClientConfigKey.ClientClassName, getDefaultClientClassname());
putDefaultStringProperty(CommonClientConfigKey.NFLoadBalancerClassName, getDefaultNfloadbalancerClassname());
putDefaultStringProperty(CommonClientConfigKey.NFLoadBalancerRuleClassName, getDefaultNfloadbalancerRuleClassname());
putDefaultStringProperty(CommonClientConfigKey.NFLoadBalancerPingClassName, getDefaultNfloadbalancerPingClassname());
putDefaultBooleanProperty(CommonClientConfigKey.PrioritizeVipAddressBasedServers, getDefaultPrioritizeVipAddressBasedServers());
putDefaultFloatProperty(CommonClientConfigKey.MinPrimeConnectionsRatio, getDefaultMinPrimeConnectionsRatio());
putDefaultStringProperty(CommonClientConfigKey.PrimeConnectionsClassName, getDefaultPrimeConnectionsClass());
putDefaultStringProperty(CommonClientConfigKey.NIWSServerListClassName, getDefaultSeverListClass());
putDefaultStringProperty(CommonClientConfigKey.VipAddressResolverClassName, getDefaultVipaddressResolverClassname());
putDefaultBooleanProperty(CommonClientConfigKey.IsClientAuthRequired, getDefaultIsClientAuthRequired());
// putDefaultStringProperty(CommonClientConfigKey.RequestIdHeaderName, getDefaultRequestIdHeaderName());
putDefaultBooleanProperty(CommonClientConfigKey.UseIPAddrForServer, getDefaultUseIpAddressForServer());
putDefaultStringProperty(CommonClientConfigKey.ListOfServers, "");

具体为CommonClientConfigKey

public static final IClientConfigKey<String> AppName = new CommonClientConfigKey<String>("AppName"){};

public static final IClientConfigKey<String> Version = new CommonClientConfigKey<String>("Version"){};
    
public static final IClientConfigKey<Integer> Port = new CommonClientConfigKey<Integer>("Port"){};

public static final IClientConfigKey<Integer> SecurePort = new CommonClientConfigKey<Integer>("SecurePort"){};

public static final IClientConfigKey<String> VipAddress = new CommonClientConfigKey<String>("VipAddress"){};

public static final IClientConfigKey<Boolean> ForceClientPortConfiguration = new CommonClientConfigKey<Boolean>("ForceClientPortConfiguration"){}; // use client defined port regardless of server advert

public static final IClientConfigKey<String> DeploymentContextBasedVipAddresses = new CommonClientConfigKey<String>("DeploymentContextBasedVipAddresses"){};

public static final IClientConfigKey<Integer> MaxAutoRetries = new CommonClientConfigKey<Integer>("MaxAutoRetries"){};

public static final IClientConfigKey<Integer> MaxAutoRetriesNextServer = new CommonClientConfigKey<Integer>("MaxAutoRetriesNextServer"){};

public static final IClientConfigKey<Boolean> OkToRetryOnAllOperations = new CommonClientConfigKey<Boolean>("OkToRetryOnAllOperations"){};

public static final IClientConfigKey<Boolean> RequestSpecificRetryOn = new CommonClientConfigKey<Boolean>("RequestSpecificRetryOn"){};

public static final IClientConfigKey<Integer> ReceiveBufferSize = new CommonClientConfigKey<Integer>("ReceiveBufferSize"){};

转载于:https://my.oschina.net/u/2266730/blog/801610

chenkang1969
关注
  • 0
    点赞
  • 踩
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
启动报Consider defining a bean of type ‘com.netflix.client.config.IClientConfig‘ in your configuration
wysghmbb的博客
08-17 2683
使用springboot+springcloudnacos 启动项目，报错为： *************************** APPLICATION FAILED TO START *************************** Description: Parameter 0 of method ribbonServerList in com.alibaba.cloud.nacos.ribbon.NacosRibbonClientConfiguration required a be
API网关Zuul配置详解(这一篇就够了)
skh2015java的博客
09-06 4259
zuul常用配置 主机相关配置 配置项 说明 默认值 zuul.host.connect-timeout-millis 连接主机的超时时间，默认单位ms 2000 zuul.host.max-per-route-connections 每个路由的连接数 20 zuul.host.max-total-connections 总连接数 200 zuul.host.connection-request-timeout-millis 连接请求
springcloud整合nacos启动时报错‘com.netflix.client.config.IClientConfig‘ that could not be found
hayhead的博客
11-26 2687
异常信息 Description: Parameter 0 of method ribbonServerList in com.alibaba.cloud.nacos.ribbon.NacosRibbonClientConfiguration required a bean of type 'com.netflix.client.config.IClientConfig' that could not be found. Action: Consider defining a bean of typ
SpringCloud-Netflix-05-Ribbon 负载均衡
緑水長流*z
03-21 513
五、Netflix Ribbon 负载均衡 5.1 Ribbon 简介 5.2 Ribbon 快速入门 5.2.1 Ribbon 服务负载均衡 5.2.2 自定义服务列表 5.3 Ribbon的配置 5.3.1 Ribbon 的属性配置 5.3.2 Ribbon常用配置 5.3.2.1 连接配置 5.3.2.2 懒加载配置 5.3.2.3 并发调整 5.3.3 Ribbon 配置策略 5.4 Ribbon的负载均衡策略 5.4.1 Ribbon负载均衡策略 5.4.1 修改Ribbon负载均衡策略
springsecurity+oauth2+jwt实现单点登录demo
06-06
该资源是springsecurity+oauth2+jwt实现的单点登录demo，模式为授权码模式，实现自定义登录页面和自定义授权页面。应用数据存在内存中或者存在数据库中（附带数据库表结构），token存储分为数据库或者Redis。demo...
使用Spring Security OAuth2实现单点登录
08-25
在本教程中，我们将讨论如何使用Spring Security OAuth和Spring Boot实现SSO - 单点登录。感兴趣的朋友跟随小编一起看看吧
spring security 基于oauth 2.0 实现 sso 单点登录Demo.zip
06-12
spring security 基于oauth 2.0 实现 sso 单点登录Demo 使用 spring security 基于oauth 2.0 实现 sso 单点登录Demo spring boot + spring security + spring security oauth
Spring Cloud 集成OAuth2实现身份认证和单点登录
07-20
Spring Cloud 安全：集成OAuth2实现身份认证和单点登录 示例代码
spring security oauth2 单点登录
08-12
NULL 博文链接：https://chun521521.iteye.com/blog/2268953
NoClassDefFoundError:Could not initialize class com.netflix.client.config.CommonClientConfigKey
u010529525的博客
05-08 3742
通过feign项目之间调用时，第一次调用抛异常java.lang.NoClassDefFoundError: com/google/common/reflect/TypeToken，之后再调用抛异常java.lang.NoClassDefFoundError: Could not initialize class com.netflix.client.config.CommonClientConf...
Spring cloud系列六 Ribbon的功能概述、主要组件和属性文件配置
不积跬步无以至千里; 不积小流无以成江海
10-26 1万+
Ribbon实现客户端的负载均衡。Spring cloud Feign已经默认集成Ribbon。 - 1.ribbon功能说明 - 2.ribbon的6个主要组件：IRule、IPing、ServerList 、ServerListFilter、ServerListUpdater、ILoadBalancer - 3.ribbon通过属性文件配置ribbon
No qualifying bean of type ‘com.netflix.client.config.IClientConfig‘ available
liurui50的博客
11-04 1648
2020-11-04 17:10:12.616 WARN 6424 — [ restartedMain] ConfigServletWebServerApplicationContext : Exception encountered during context initialization - cancelling refresh attempt: org.springframework.beans.factory.UnsatisfiedDependencyException: Error crea
ribbon出现 com.netflix.client.config.IClientConfig that could not be found
qq_30908729的博客
06-22 3857
A component required a bean of type 'com.netflix.client.config.IClientConfig' that could not be found 解决方法： 如果ribbon策略配置类放在主程序SpringBootApplication同包目录下会发生未知异常，这是由于Spring boot的主程序会去扫描同一个层级目录下的文件，这里有两种办法可以解决：http://yayihouse.com/yayishuwu/chapter/2645 .
日常开发之OpenFeign配置
miaoao611的博客
04-14 1224
Feign feign: client: # defaultclient 配置信息 config: default: # 全局服务配置 connectTimeout: # 连接超时时间，默认值：2000 readTimeout: # 读取超时时间，默认值：5000 itemcenter: # 对 itemcenter 服务进行局部配置，itemcenter 是你的服务名 connectTimeout: 3000 # 连接超时时间 readTimeout: 6000 # 读取超时时间 httpclient:
SpringSecurity+OAuth2实现单点登录SSO（详细教程+源码）
空夜's Blog
10-24 1万+
文章目录一、父级项目sso-oauth2-demo二、授权服务器auth-server三、客户端应用client-a与client-b四、启动与测试 本节源码在https://github.com/laolunsi/spring-boot-examples/tree/master/04-sso-oauth2-demo上，请放心食用 本节利用Spring Security Oauth2实现Spri...
Spring Security Oauth2单点登录原理与技术
夏笙的博客
09-21 4623
本文来自 千峰教育李卫民老师的博客 此文章只是在学习中记录的笔记，如果想学习 请到李卫民老师的博客学习 （免费） Spring Security Oauth2单点登录原理与技术 一、什么是 oAuth --协议 oAuth 协议为用户资源的授权提供了一个安全的、开放而又简易的标准。与以往的授权方式不同之处是 oAuth 的授权不会使第三方触及到用户的帐号信息（如用户名与密码），即第三方无需使用用户...
spring security oauth2 单点登录资料整理( 技术选型：CAS与oauth2对比）
qq_36903526的博客
07-10 9191
CAS协议和工作流程下图是 CAS 最基础协议：1 、 CAS Client 与受保护的客户端应用部署在一起，以 Filter 方式保护受保护的资源。对于访问受保护资源的每个 Web 请求， CAS Client 会分析该请求的 Http 请求中是否包含 Service Ticket （ ST ）和 Ticket Granting tieckt(TGT) ，如果没有，则说明当前用户尚未登录，于是将...
OAuth2.0 原理流程及其单点登录和权限控制
热门推荐
kefeng.wang 的博客
07-26 13万+
单点登录是多域名企业站点流行的登录方式。本文以现实生活场景辅助理解，力争彻底理清 OAuth2.0 实现单点登录的原理流程。同时总结了权限控制的实现方案，及其在微服务架构中的应用。 作者：王克锋 出处：https://kefeng.wang/2018/04/06/oauth2-sso/ 版权：自由转载-非商用-非衍生-保持署名，转载请标明作者和出处。 1 什么是单点登录 1....
springsecurity oauth2 单点登录实战
最新发布
07-27
- \[spring-security-oauth2是对OAuth2协议中授权类型的具体实现，也是我们实现单点登录功能实际用到的代码\](https://blog.csdn.net/pxg943055021/article/details/124752669) \[3\] 通过参考以上链接，你可以了解...

“相关推荐”对你有帮助么？

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值